[DEPRECATED] Using Web Security Scanner to Find Vulnerabilities in an App Engine Application Reviews

Carmen L. · Reviewed about 5 years ago

Brandon N. · Reviewed about 5 years ago

Johnny Q. · Reviewed about 5 years ago

-

TANG S. · Reviewed about 5 years ago

Randi-Michelle C. · Reviewed about 5 years ago

Jensen L. · Reviewed about 5 years ago

Chin Joo C. · Reviewed about 5 years ago

Soo M. · Reviewed about 5 years ago

Iskandhar S. · Reviewed about 5 years ago

dai T. · Reviewed about 5 years ago

Kelvin C. · Reviewed about 5 years ago

Chris N. · Reviewed about 5 years ago

Anil K. · Reviewed about 5 years ago

George F. · Reviewed about 5 years ago

Sawan T. · Reviewed about 5 years ago

Edward R. · Reviewed about 5 years ago

This introductory cloud security scanner lab is interesting but in practice has some flaws. I found that the requirements.txt file for the lab's included bookshelf app was obsolete and had conflicts among the specified dependency versions. The automated packager recommended removing all the version number restrictions in the requirements.txt file and this allowed it to build the app. The security scanner itself is remarkably slow, taking 20 minutes to scan 300 or so URLs. I thought it did 15/sec, which would take less than a minute. Maybe it was busy tonight when I ran the lab.

Paul B. · Reviewed about 5 years ago

Alejandro B. · Reviewed about 5 years ago

Todd W. · Reviewed about 5 years ago

Great

Nicola B. · Reviewed about 5 years ago

requirements.txt causes error ERROR: Cannot install -r requirements.txt (line 5) and google-cloud-logging==2.2.0 because these package versions have conflicting dependencies. Scanner takes a while (20min). Possibly better to use smaller app

Vladislavs O. · Reviewed about 5 years ago

Great

Nicola B. · Reviewed about 5 years ago

Ricky T. · Reviewed about 5 years ago

security scanner does not stop

Yuki K. · Reviewed about 5 years ago

Grace T. · Reviewed about 5 years ago